Privacy Policy

Last updated: 30 May 2026

Note: This English translation is provided for convenience only. In case of any discrepancy, the German original shall prevail.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Tobias Bauer
Martinusstr. 41
52525 Heinsberg
Germany
Email: mailbinshapercom

2. General information on data processing

2.1 Scope of processing of personal data

We process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. Processing of personal data takes place regularly only after consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing is permitted by law.

2.2 Legal basis for processing

Insofar as we obtain the consent of the data subject for processing, Art. 6 (1) (a) GDPR serves as the legal basis. For processing necessary for the performance of a contract, Art. 6 (1) (b) GDPR applies. Insofar as processing is necessary to comply with a legal obligation, Art. 6 (1) (c) GDPR applies. If processing is necessary to safeguard a legitimate interest and our interests outweigh those of the data subject, Art. 6 (1) (f) GDPR applies.

2.3 Data deletion and storage period

Personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also occur if provided for by European or national legislation, regulations or other provisions to which the controller is subject (e.g. retention obligations under commercial or tax law of up to 10 years).

3. Provision of the website and hosting

3.1 Description and scope of data processing

Each time our website is accessed, our hosting provider automatically collects information that the browser of the requesting end device transmits. The following data is collected:

IP address of the requesting device (truncated/anonymised)
Date and time of access
Requested file and amount of data transferred
Indication of whether the request was successful
Transmitted referrer (previously visited page)
Browser, operating system and language settings

This data is stored in technical server logs. No combination of this data with other data sources or evaluation for marketing purposes takes place.

3.2 Legal basis and purpose

The legal basis for the temporary storage of the data and log files is Art. 6 (1) (f) GDPR. The temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. Our legitimate interest is to provide the website stably, securely and reliably and to prevent attacks.

3.3 Hosting provider: Cloudflare

This website is hosted on the Cloudflare Pages platform. Provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, as well as Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany.

Cloudflare operates a globally distributed Content Delivery Network (CDN) and delivers content from data centres worldwide, including in the EU. When you access our website, connection data (e.g. IP address, date, time, requested content) is processed by Cloudflare. Cloudflare uses this data, among other things, to deliver content, ensure availability, protect against cyber attacks (e.g. DDoS filtering) and optimise performance.

A transfer of personal data to the USA may occur. Cloudflare is certified under the EU-US Data Privacy Framework, thereby providing an adequate level of data protection within the meaning of the European Commission’s adequacy decision of 10 July 2023. We have a data processing agreement (Art. 28 GDPR) with Cloudflare.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing a secure, fast and reliable website). For more information see the Cloudflare privacy policy .

4. Cookies

This website uses no tracking cookies, no analytics cookies and no third-party cookies. We only use functions that work without consent-required cookies or similar technologies (within the meaning of § 25 TDDDG). For this reason we do not display a cookie banner.

5. Contact form and email contact

5.1 Description and scope of data processing

Our website provides a contact form which can be used for electronic contact. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. This data includes:

Name
Email address
Subject (optional)
Content of the message
Date and time of submission

At the time of submission, your consent is obtained for processing and a reference is made to this privacy policy. Alternatively, you may contact us directly using the email address provided. In this case the personal data transmitted by email will be stored.

5.2 Legal basis

The legal basis is Art. 6 (1) (a) GDPR if your consent has been obtained, or Art. 6 (1) (b) GDPR for data sent in the course of an email or contractual request.

5.3 Purpose of processing

The processing serves solely to handle your enquiry. In the case of contact by email, this also constitutes the necessary legitimate interest in processing.

5.4 Recipient / processor (Resend)

For reliable delivery of messages submitted via the contact form, we use the email-sending service Resend (provider: Resend, Inc., 2261 Market Street #4667, San Francisco, CA 94114, USA). During delivery, the data entered in the form (name, email, subject and message) is transmitted to Resend and forwarded to our email address. We have a data processing agreement (Art. 28 GDPR) with Resend. Resend is certified under the EU-US Data Privacy Framework and delivery can be processed via the EU region (Frankfurt, Germany). See the Resend privacy policy .

5.5 Storage period

Data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent via the contact form or email, this is the case when the conversation with the user has ended. Where statutory retention obligations apply (e.g. under the German Commercial Code or Tax Code), data will be retained accordingly and deleted after these periods expire.

5.6 Right of objection and removal

You may revoke your consent to the processing of your personal data at any time. If you contact us by email, you may object to the storage of your personal data at any time. In such cases, the conversation cannot be continued. An informal email to mailbinshapercom is sufficient. All personal data stored in connection with your contact will be deleted in this case.

6. Newsletter / waitlist sign-ups

6.1 Description and scope of data processing

On detail pages of apps that have not yet been released, we offer a "join the list" form through which you can sign up for release notifications as well as occasional updates about our apps. The following data is processed:

Name (free choice, may be a nickname)
Email address
App you signed up via (internal source information)
Date and time of sign-up

The sign-up uses a double opt-in process: After submitting the form you receive an email with a confirmation link. Only after clicking that link are you finally added to our mailing list. If you do not confirm, your data is not permanently stored – the preliminary sign-up token is valid for 7 days and contains your details cryptographically signed.

6.2 Legal basis

The legal basis is your explicit consent pursuant to Art. 6 (1) (a) GDPR as well as § 7 (2) no. 1 UWG for sending email notifications. Consent is given by actively ticking the checkbox and subsequently confirming the link in the confirmation email. It can be revoked at any time with effect for the future, without affecting the lawfulness of any processing carried out before the revocation.

6.3 Purpose of processing

The data is used to inform you by email about the release of the respective app, new apps from us as well as occasionally about significant updates. Use for any other advertising purposes, tracking, profiling or forwarding to third parties for such purposes does not take place.

6.4 Recipient / processor (Resend)

Both the confirmation email and the storage of contacts are handled via the email-sending service Resend (provider: Resend, Inc., 2261 Market Street #4667, San Francisco, CA 94114, USA). Resend offers an "Audiences" feature in which the confirmed email addresses are managed in a list, so that we can send a launch or update newsletter ("broadcast") to all subscribers. We have a data processing agreement (Art. 28 GDPR) with Resend; Resend is certified under the EU-US Data Privacy Framework and processes data in the EU region (Frankfurt, Germany). See the Resend privacy policy .

6.5 Storage period and revocation

Your data is stored until you withdraw your consent (unsubscribe). You can unsubscribe at any time and without giving reasons – either via the unsubscribe link contained in every email we send or by sending an informal message to mailbinshapercom . After revocation your personal data is removed from our mailing list without undue delay. If you do not confirm the sign-up link, no data is permanently stored at all.

6.6 Spam protection (Cloudflare Turnstile)

When submitting the sign-up form we use Cloudflare Turnstile to prevent automated sign-ups. Cloudflare processes technical data (e.g. IP address, user-agent, screen resolution, cookies of the current session) solely for bot detection, not for profiling purposes. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protecting our forms from abuse). For more information see the Cloudflare privacy policy .

7. External links to App Stores

On our app detail pages we link to the Apple App Store (Apple Inc.) and the Google Play Store (Google Ireland Limited / Google LLC). Only when you click such a link will you be redirected to the servers of the respective providers. There is no automatic connection to these providers. We have no influence on the data processing by Apple or Google. Please refer to their privacy policies:

8. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser switches from “http://” to “https://” and by the lock symbol in the browser bar.

9. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7 (3) GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to mailbinshapercom is sufficient.

10. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 (1) and (4) GDPR takes place on this website.

11. Updates to this privacy policy

This privacy policy is currently valid and dates from 30 May 2026. Due to the further development of our website or due to changes in legal or regulatory requirements, it may become necessary to update this privacy policy. The current version is always available on this page.